The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
http://lists.suse.com/pipermail/sle-security-updates/2016-October/002337.html
http://lists.opensuse.org/opensuse-updates/2016-10/msg00083.html